https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 05:13:18 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-343832 EUVD-2026-343832 https://cve.radiocsirt.org/vuln/euvd-2026-343832 https://cve.radiocsirt.org/vuln/fkie_cve-2025-71403 <p>better-auth versions before 1.1.20 contain a bypass vulnerability in trustedOrigins validation logic affecting absolute URLs and wildcard domains. Attackers can construct malicious callbackURL parameters that pass origin checks and trigger open redirects to steal sensitive tokens for account takeover.</p> <p>better-auth versions before 1.1.20 contain a bypass vulnerability in trustedOrigins validation logic affecting absolute URLs and wildcard domains. Attackers can construct malicious callbackURL parameters that pass origin checks and trigger open redirects to steal sensitive tokens for account takeover.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-71403 https://cve.radiocsirt.org/vuln/ghsa-g2jv-pgqw-qxhv <p>better-auth versions before 1.1.20 contain a bypass vulnerability in trustedOrigins validation logic affecting absolute URLs and wildcard domains. Attackers can construct malicious callbackURL parameters that pass origin checks and trigger open redirects to steal sensitive tokens for account takeover.</p> <p>better-auth versions before 1.1.20 contain a bypass vulnerability in trustedOrigins validation logic affecting absolute URLs and wildcard domains. Attackers can construct malicious callbackURL parameters that pass origin checks and trigger open redirects to steal sensitive tokens for account takeover.</p> https://cve.radiocsirt.org/vuln/ghsa-g2jv-pgqw-qxhv